Single Sign On is a technology that allows a single login to be transparently used with multiple applications and environments.

learn more… | top users | synonyms (1)

0
votes
0answers
6 views

Trouble activating Single Sign-On (SSO) on Trial subscription to Oracle Cloud

everybody First, I am not sure I am really on topic here, but Oracle's own "cloud" support and community forums are not helpful (they get very little traffic and there were no responses yet). Maybe ...
2
votes
1answer
1k views

$_SERVER['REMOTE_USER'] not found using LDAP SSO

Am trying to use the SSO LDAP module on Drupal. The LDAP authentication for Drupal works fine (people can login using their AD credentials on Drupal and be logged in, the test system also returns ...
0
votes
1answer
2k views

Linux webfilter with LDAP SSO authentication

I'm looking for a self-made linux proxy/webfilter server and stumbled upon several products. (squidguard, dansguardian, ..) I found Privoxy the most appealing. Now I went searching on the internet for ...
0
votes
1answer
1k views

php REMOTE_USER variable

I am trying to setup mediawiki with SSO. I was able to set up authentification with domain, but I cannot setup SSO. For some reason, $_SERVER['REMOTE_USER'] variable is not set. I looked into some ...
0
votes
0answers
15 views

How To Use Amazon Cognito As An SSO OpenID Identity Provider

We currently use Google as an OpenID identity provider to our web platform. We need to move away from it. I discovered Amazon Cognito (we already use EC2/S3 and the rest). I discovered the ...
2
votes
2answers
577 views

Office 365 with Azure AD - can I allow SSO for another 3rd party SAML app externally?

I'm shooting a little blind here in that I'm not an Azure expert and don't really mess with it yet beyond O365 and DirSync. We have a 3rd party app written in Ruby on Rails that they are saying is ...
0
votes
0answers
13 views

Setting up Oracle WebGate for Apache web server without OAM

I have the need to mock traffic to and from Oracle WebGate on an Apache web server to test a deliverable server configuration (the web server machine). Is this possible? Background: I am not a system ...
0
votes
1answer
18 views

how to add my google apps accounts to Active directory Federation service?

Note - There are many discussions about syncing Google app accounts to Active directory. This is a different question - I would like my users (about 10) on google app to login to my local web apps ...
0
votes
2answers
66 views

ADFS and relying party web form

We are in the process of configuring our ADFS server to allow SMAL authentication from a third party web application. We are slightly confused as listed below: We received metadata file and ...
0
votes
0answers
110 views

ADFS SSO w/ Chrome

I'm in need for some help with this one, despite going through many many KB around the web, I cannot figure this out: Chrome working with ADFS 2.0 keeps prompting for credentials and will not use ...
0
votes
0answers
14 views

ADFS SimpleSamlPHP - Missing SingleSignOn

We are integrating SimpleSamlPHP with ADFS. We have the federation Metadata with us. But the metadata xml doesn't have the SingleSignOnService Node in it. We have the SingleLogoutService option alone ...
0
votes
0answers
18 views

Research ideas related to Distributed Single Sign on Systems(ADFS) ?

I'm going to do a research related to Security in Distributed Single Sign On system. Then i came up with the idea of implementing federated security using the LDAP and Kerberos as in following figure. ...
0
votes
0answers
43 views

SSO, Kerberos, multiple domains, multiple Linux servers

I have successfully implemented SSO for one production application running on Centos 6 + apache 2.2. connecting to Windows 2008 AD server. Users are coming from 2 different domains: a.com and b.net, ...
1
vote
1answer
983 views

AD FS 3.0 Event ID 364 while creating MFA (and SSO)

I have an clean installation of AD FS 3.0 installed on windows server 2012. I am trying to create MFA on my internal network using this Codeplex. AD FS Management > Authentication Policies ...
1
vote
1answer
22 views

Sign into exchange from outlook using alias email address?

We have 2 domains. TestCenter.org and TestProject.org. Server 2012 R2 Running AD and ADFS We have an Exchange 2010 server running as well All users have an email address for the TestCenter.org. ...
0
votes
1answer
56 views

gssapi/kerberos/active directory/ubuntu - Wrong principal in request

I'm trying to setup a Clientserver with a Webservice to which Users of an Active Directory should be able to login with SSO. I'm using SPNEGO with Kerberos on a Ubuntu 14.04 Server and nginx proxy to ...
2
votes
1answer
2k views

ADFS SSO - LDAP Attributes as Claims - UPN as NameID - NameID Missing from SAML Response for users whose UPN is changed

ADFS SSO setup with Salesforce which uses UPN as NameID, has following configuration ADFS. Claim Rule Template: Send LDAP Attributes as Claims Claim Rule Name: Send the UPN as NameID LDAP ...
0
votes
0answers
29 views

How to insert a CAS authentication header in the reply?

I use mod_auth_cas to authorize access to selected Location: <Location /> Authtype CAS AuthGroupFile /var/source/groups require valid-user </Location> Is there a ...
0
votes
0answers
57 views

Keycloak - restricting access to /auth

Keycloak 1.7 Standalone I have a tomcat app connected with the keycloak adapter. As soon my app is invoked it goes to keycloak sso url $KEYCLOAK_URL/auth/realms/$REALM/protocol/openid-connect/auth ...
0
votes
0answers
22 views

SSO for hybrid browser and API authentication

My organization is testing a SAML2 environment made up of a Shibboleth Service Provider and a SimpleSamlPHP Identity Provider. The idP obtains auth information from a custom REST API (no LDAP or AD). ...
5
votes
1answer
3k views

Can I use Office365 or Azure AD as master record for Active Directory?

We have a small business and currently don't have a need for a domain within our office. We have a basic network and a single server running Windows Server 2008 R2 with some file shares and 3rd party ...
1
vote
1answer
33 views

Incorrect Single Sign On Url - Cant Update

I'm having an issue. I've set up a third party SSO with my office365 account. The third party SSO authenticates with my on-premesis Active Directory. The only difference between using an ADFS on ...
1
vote
1answer
10k views

Windows 2008 R2 RDS - Double Login

Issue: Double logins when connecting to RemoteApps or Remote Desktop Environment: Gateway = 1 server 2008 R2 - Roles = Gateway, Session Broker, Connection Mgr, Session Host Configuration server ...
3
votes
3answers
658 views

Single sign on with Apache and LDAP

I have a server running two web applications: Gerrit and Mantis BT. Now, these applications connect to an LDAP server to authenticate users and it works fine. But the user has to authenticate for each ...
1
vote
0answers
45 views

SiteMinder web agent freeze with apached 2.4 (32bit) on Windows 2012 64

I am using Apached with Siteminder for single-sign on authentication. My config is as follow: 64 bit Windows 2012 (64) R1. Apached 2.4, (32 bits) (We tried the 64 bits but it does not work with the ...
2
votes
1answer
76 views

Dynamics CRM with Windows Essentials AD + Azure AD

I'm trying to configure a new Dynamics CRM 2016 on premise installation with Claims based authentication for Sharepoint Online (Office 365) and Internet facing access. We currently have a Windows ...
2
votes
2answers
2k views

Windows Server 2003 -Ktpass - crypto: enum value 'rc4-hmac' is not known

I'm trying to create a keytab with Ktpass on a Windows Server 2003 with: Ktpass -princ host/prueba-mail.ejemplo.org@EJEMPLO.ORG -mapuser host -pass password -crypto rc4-hmac -out UNIXhost.keytab I ...
0
votes
1answer
79 views

Apached + Siteminder issue

I am experiencing some very slow longin issue in my server that provide a single sign-on via Siteminder. After looking at the log. I can see the following: [15/Dec/2015:16:47:09] [Info] [CA ...
0
votes
1answer
36 views

Imitate Azure AD user/tenant claims within ADFS

I have a .Net web application that allows users to hook up their account with an identity provider (Azure AD, Google, and/or ADFS) to allow single sign-on. On hooking up their account (or ...
0
votes
2answers
85 views

ADFS and Shibboleth: Controlling behavior of Windows authentication

We are doing SSO using ADFS and Shibboleth SP. In a perfect world, Windows authentication would always work, i.e., the user accesses https://shibboleth/Login?target=somewhere, is redirected to ...
0
votes
1answer
124 views

Single Sign On with multiple Identity Providers from PHP web app

I'm building a SAAS web app in PHP that needs to integrate SSO. We'll have multiple client organizations, each that have their own Identity Provider (Active Directory). While researching ...
0
votes
3answers
626 views

Splunk SAML SSO from an IdP with Apache mod_mellon fails

I am trying to configure SSO from an IdP to Apache with mod_mellon and mod proxy to splunk. Environment: Ubuntu 14.04; Apache 2.4.7; mod-auth-mellon 0.7.0. Apache configured with the ...
0
votes
0answers
27 views

How to use shibboleth IDP under proxy?

Say I have a java web application which is configured to work with Shibboleth identity provider. Now I'm adding some another server on dfferent host which proxies requests to java web application. ...
0
votes
1answer
38 views

Linux LDAP to Ldapadmin configuration issues

I'm learning how to setup and use OpenLDAP installed on an Ubuntu server. I executed sudo apt-get install slapd ldap-utils -y and set my ldap domain to test.mydomain.com. I can execute ldapadd ...
0
votes
0answers
21 views

Does Azure AD SAML integration allow domain authenticated users to sign-on to Web Services without re-entering credentials?

Good Morning, I'm trying to understand the Azure AD SAML 2.0 process a little better and I have a question: If a user's on-premise Active Directory is synchronized (DirSync) with an Azure AD tenant, ...
0
votes
2answers
340 views

Using Shibboleth with ADFS doesn't work

I'm trying to familiarize myself with Shibboleth 2.5.3 and Active Directory Federation Services (tried both 2.0 and 3.0). What I'd like to achieve is having an Apache server authenticate against ADFS ...
1
vote
2answers
65 views

How to configure Tomcat WebApp to accept credentials from Apache

I am attempting to get a web application, running in Tomcat 6, to authorize a user that was authenticated by Apache. I have configured Apache 2.4 to use Active Directory for user authentication ...
0
votes
0answers
175 views

Can Keycloak be used as external (SSO) authentication service for Alfresco and Share?

I have an Web application with Java EE security running in Wildfly 9 that uses Keycloak 1.4 (in a separate service) as the authentication and authorization service. I'd like to allow users logged in ...
0
votes
0answers
166 views

Can Keycloak provide SSO via Apache web service?

I'm trying to use Keycloak as an external authentication service for Alfresco (see: Can Keycloak be used as external (SSO) authentication service for Alfresco and Share?). I've gotten no responses to ...
1
vote
2answers
186 views

Connect Azure Active Directory to on premise customer AD

We have a web application running in Windows Azure where a variety of customers can log in. Lately more and more of them have been asking for some sort of single sign on solution, or at least a ...
18
votes
4answers
30k views

How does SSO with Active Directory work whereby users are transparently logged in to an intranet web app?

I'm told that it's possible to make a web application that does not require a login. The user logs in to Windows, which authenticates via an Active Directory (LDAP) Lookup. Then, they should be able ...
1
vote
0answers
166 views

SSO Linux and AD Trusted Domain

Having successfully built a one-way trust between 2 AD domains, we can't lookup/id the user in the trusted domain. Here's our use case. AD1: dom1.com (Win2k8 R2) - One-way outgoing trust to AD2 ...
0
votes
0answers
215 views

Is it ok to disable the KCM (Kerberos Credential Cache) daemon on OS X?

I've got some issues that seems would be cleared up if I disable the KCM Daemon (it's the Kerberos Credential Cache). Is there any good reason I shouldn't? Does it break anything other than single ...
2
votes
1answer
253 views

Azure AD SAML2 SSO wrong NameID format

I am trying to integrate a SaaS application with an autonomous (not federated with anything) Azure Active Directory for SSO purposes. The SaaS application (the Service Provider) is SAML2 compliant ...
1
vote
1answer
47 views

Single Sign on for Virtual Machine

Does anyone know if it is possible for a Windows Virtual Machine on a Windows host to take advantage of Single Sign on? The objective is to only have to login once to the host machine and for the ...
0
votes
0answers
75 views

SAML for Google Cloud Platform with no Google Apps for Business

Is there a way to use SAML SSO with google cloud platform without paying for the $10/month account fee for Google Apps for Business (Which most SAML auth with Google seems to point to)? Our ...
1
vote
1answer
155 views

Single Sign-On and Active Directory Federation (ADFS)

Can anyone please tell me, what is the difference between active directory federation services (ADFS) and single sign-on (SSO)? From a simple look at things both seem to do much the same thing in ...
0
votes
0answers
154 views

Kerberos key version number mismatch in Apache, even though kvno and klist -k return the same numbers

I don't know if anyone had this issue. I am trying to implement single-sign-on through Kerberos and I get the following Apache error: [Thu Aug 13 12:08:54.219420 2015] [auth_kerb:error] [pid 1829] ...
2
votes
1answer
294 views

Linux SSO for multiple windows domains

I have successfully implemented SSO on apache for windows users in the same AD domain that the apache server is in: AD domain = example.com Linux server = linux.example.com KDC = ad.example.com I ...
0
votes
0answers
164 views

JBoss EAP 6.3 - SSO and Sticky Sessions not working

We have a cluster with 2 nodes (JBoss EAP 6.3 with Single Sign On enabled), node 1 and node 2 in different servers. On top of that we have an Apache2 and are using mod_cluster for load balancing and ...